Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7A8IDvfK2HK2DB5pWFwqwkQBneo.roa
File: 7A8IDvfK2HK2DB5pWFwqwkQBneo.roa (raw, json)
Hash identifier: Ffo5iKZgdgFpO9+6pP1aCRy7rfWlnomvgYmlMiDwABY=
Subject key identifier: EC:0F:08:0E:F7:CA:D8:72:B6:0C:1E:69:58:5C:2A:C2:44:01:9D:EA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916C0E2DAE91E178861AE562B47FBBB88E
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7A8IDvfK2HK2DB5pWFwqwkQBneo.roa
Signing time: Mon 19 Aug 2024 19:12:34 +0000
ROA not before: Mon 19 Aug 2024 19:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:0e:2d:ae:91:e1:78:86:1a:e5:62:b4:7f:bb:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 19 19:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec0f080ef7cad872b60c1e69585c2ac244019dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:f5:50:1a:9c:42:42:48:b1:43:0e:42:14:
96:85:b2:0a:fc:e6:6d:be:8d:e5:7f:e9:b2:c0:b1:
79:f5:85:ea:52:8b:2f:17:8c:75:42:02:02:18:ef:
c6:27:d1:8a:24:68:3e:16:fb:7a:e8:84:33:f7:07:
c9:28:e4:02:34:2d:21:12:16:7a:26:c7:51:91:1f:
cb:40:95:1f:59:a7:43:bd:f3:71:61:59:e1:a7:23:
57:15:d4:06:20:80:41:05:b7:cb:fe:b7:47:71:28:
ad:37:04:ab:f1:72:63:6a:f6:90:1d:25:5f:3a:3b:
ff:9b:df:2d:e2:42:d6:e1:3f:2b:aa:a4:ce:0f:8d:
70:7c:9f:df:57:93:20:a3:6b:05:ab:30:e4:86:f4:
71:b5:79:d2:bd:c6:71:14:8d:7e:07:d4:c5:a3:b3:
54:b5:39:da:be:20:80:8c:2b:28:f9:de:0b:cb:8a:
01:5a:d0:36:cd:e2:60:63:e6:4c:31:0b:8b:b4:53:
3d:cb:70:55:ed:14:fc:90:58:07:9b:df:7f:2e:74:
e5:37:67:f6:bf:d9:f2:76:a1:70:74:73:d7:aa:da:
a1:b9:41:4d:26:6c:be:5b:a5:d3:08:fc:ee:a1:0b:
3d:74:7c:dc:72:8f:1d:ca:e2:19:b2:49:33:84:f8:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:08:0E:F7:CA:D8:72:B6:0C:1E:69:58:5C:2A:C2:44:01:9D:EA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/7A8IDvfK2HK2DB5pWFwqwkQBneo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
1c:0b:25:87:a5:e9:3a:ba:30:a1:ca:fc:f9:49:b7:15:9f:b6:
a2:6f:05:c4:ab:3b:81:e2:9c:1c:ed:eb:2d:7e:03:a6:8a:3f:
00:2e:4c:f0:04:0c:71:e6:41:c3:67:c7:3c:a2:8e:a9:08:8a:
da:89:52:f5:da:c7:f8:79:c3:18:12:58:b9:0b:a7:9d:50:0f:
50:c5:9c:0c:e0:2b:e7:57:f3:b9:ba:08:31:a0:4f:46:e7:75:
a0:ff:28:3d:a3:74:e4:c1:2e:83:11:06:99:8e:1d:b0:83:5e:
f6:b9:30:2c:23:13:ee:ea:37:ac:7f:6d:af:36:45:9f:d4:8b:
23:b8:98:d6:82:c5:48:ab:08:f5:a5:10:80:91:c6:1b:fc:7a:
97:84:2d:19:54:da:02:a3:22:09:ae:54:38:cb:ba:d6:93:23:
5c:63:a8:8c:96:f7:ac:cb:74:7b:81:f9:a0:a0:4f:e1:d0:f6:
3d:b5:7d:40:d0:54:38:de:45:a2:c7:06:d3:f9:e3:83:33:0a:
67:09:74:c0:c8:49:ed:62:2e:71:6c:32:34:99:03:5c:7d:63:
16:29:7a:dc:20:10:d6:c7:4a:0e:49:d6:44:14:4a:e2:db:bc:
5d:dc:bb:7c:12:08:44:52:09:31:ea:7e:3a:7e:15:12:d9:38:
60:2c:a9:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:32 2025 by rpki-client